Netherlands: Dutch Data Protection Authority issued fine against Coolblue for unsolicited use of cookies

On 24 December 2024, the Dutch Data Protection Authority (AP) imposed a fine of EUR 40,000 fine on Coolblue for unsolicited use of cookies. The ruling highlights Coolblue’s failure to obtain explicit consent from website visitors before collecting personal data through cookies. The AP found that Coolblue assumed visitor consent and used pre-checked boxes, violating the General Data Protection Regulation (GDPR).